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his l*sti ; o* cia 'cpluccs u" pro o s 
Listing of C laims : 

1, (Currently Amended) A method of iden.tify.vng unwanted messages. She method 
comprising: 

i i - { sjj ,n eii.cSn.rn ^ ma nn n i v i j t o 

i< Ul <f\ ! < . U ! O !_ > v ! t ! v S I > 

address of a recipient ; 

c i ' - . eristics of the inspected, payload portion of the e 

that has been inspected; 

xvscd >mpa s ig \ c< too u misc 1:101 i 

ee > % ?ong at east o e of acceptab ■ t 1 s states; am 

fi(>< mi Ml _ ! u,^ i'if _ w , v< -' \- ^ 1 i 

>m<.c- . ! \ A^i-o \lAo 

i g e le< i..yS 1 n ]i icssa ge i e j ci Dndi cialed with 

the electronic mail message reflects the unacceptable state; 

ecepm * , ' t t, aS j odd. clj a ^0 ed 

with ihe 'dv r s 1 r_ message reflects die acceptable state; and 

it he fin- sees y condition associated w t n Alecb 

he mdaenn nance? c mo noimg in; eieettc \, 1 a.d ne^aese :a 

transmitting the electronic, mail message base d on the address of the 
1 ^ 

tracking 1 location of da u 1 c a -i a 1 oessagee 
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i n v i i ,e at to tlw 

fKeeeasMg - t >'_\„ ' s « the e be Tronic mail message; 

up < - <Ct > ~ - ^ ^'>!\' Ca. OOl K 

elevtromc " ! «>say J s been mspeciei 

iteg s n f v i l i ^ e ^ n o s c 

nia.il message t o a second security con dition of the transmitted electron ic mail 
i essage -< , on 1 np< is ed da anr 

Rwce^cv t - t j - o'.ij v - \ \u or da," second 
sceuritv condition, w herein reprocessing the transmitted electroni c oic-il message 
A JL_ \. > i i * - v . j 

% (Original) The method of claim 1 wherein the characteristics of the pay load 
ft 1 «oi in id hi o t o.t . > • v - , ! - 

3. (Original) The method of claim 2 wherein the characteristics of the payioad 
port 05 do not nc di t ess i forn i U 

4-5. (Cancelled}. 

< rre s h Unc ded) The methoi fdais [5]] whereh [the a seem tj 
eorJ iion ^'O . un.n i s » i i ltl > > s e > lie 

unacceptable state when the comparison of the characteristics reveals a threshold number of 
n essages bavin < ih red c'ha actet s ie 

7. vi o I \ c ed 1 hod of c\a> n o a he cmreo * k \ ij 
electroni c ma d message based car nn sepopd secants condition include.- wvh. deleting tlx: 

v „ v .1 s^u"t O'J c ! I " »0 OX 



Applicant : Lorin Sutton et at Attorney's Docket K.v W ^Uiii, Nt-twor!: 

Sena! No, 10 ,'>*•) $4~ 

Filed ; January 31, 2002 

P«*e : 4 of 17 



other s[ecLrtffiiC mail message inspected subsequent to i o v^- 1 - %> ir s -> v the 
v. . < s ^ U v >s v ; v vjifct one 

message, 

S. (Currently Amended) The method of claim 1 furl e comprising traekhig the 
d rav o is i <■>' t i a ^ n i i . f 1 > n s [ e - \ ^ >< Cu- m 
>' v -acs of a new electronic mail mess < v - 

the eharaeteri ics ol k ^ v, o to j o. a sme essage at is bee tracks* 

9. (Currently Amended) The method of claim 8 wherein comparing the 
characteristics of the payload portion includes comparing the characteristics of the payload 
po ion o > is nsp.v .0 w lo-ec m . s -. < i i \ ' k 

U (An re th \ 1 uk I od 1 e ; i n v i> can die t actes islics oi t k 

payload portion of [jaj j the ehctnsmc mud message ere tracked when the tVt-j security condition 
mtthed .1 <, 1 dct( ! c t + _ 

11. a anv:it s \ Amended; P.iv mem-A of-.iam. •"•Aheioin e.r: i c state is 

t< v ft ♦ ' ~ " 1 t i v. v iS i „ "> i v. C [! v « wtC it 

ihc ehuracieris >f tin payload ] coal s t in co ! 

v C s m?ar c; aractcr st os of other electronic mad messages 

v O V i • , v I > , 1 i v. p V J<H, J, !' 

^ \ CTa niNi\ j v, •> k 

transmitted electroni c mail message reflects the t T t J - aceeotahje state- 
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13. {Cancelled}. 

14. t uu tH \ ^ m^>S method of Jcj j v\ a». \nt <. U s . , h 
c^oc t:on cb< coin ng tl ci ; tens cs fm et one ekeU-m < ] i >ssage 

nee m\ m . , j „ , cvii e 

1 5. (Currently Amended) The method of claim 1 wherein identifying the hrst security 
condition includes com\ f ^ g|ecj i i essage se 

by a single device, 

16-29. (Cancelled). 

n.mm i "t - u v ^ mv _ - leu i u sk J iosjl e i 

econd security conditio! ctronic i 

3 0 (Current * . v * Them*f*hod of v in) vlmr j uero-o! the first 
security condition of the transmitted electronic mai t message to a second security condition of 

mfooregODion 

security condition that reflects the acceptable state. 

3 1 . (Currently Amended) The method of claim 1 wherein recategariang the first 
security condition of the trans mitted electronic mai l message to a seco nd sec urity eomiitjon of 
L' 1 " . ' - m " ~ I - , < - r 

' f[ll, N „ j - 't S v. JT W t ' " ^ ti i ' v. L f ' ' IjQ i „ L 

seme n\ cm in that , the uoac rotable state. 
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si i\ * ended)! :\;'^ >C; 7 5 «fc i t-tseeutsis 
condition as reflecting the acceptable state includes identifying die fjrsi security condition as 
reflecting a neutral slate. 

33. tCur ii !- v 1 % v. t< _v ^tu v 

ond or as id n a < ucee^vh \ r mc^ t0.c 1 ic . - » , , on as 
reflecting a hostile state, 

>4 Current]} Amended) 1 method oi i where e a ng the - 
security condition of the transmitted elect ronic mail message is performed when the stored data 
s updated s i is f ^ ' c_i ssage with 

ecu am character, n^s wmdd be identified as re-fleer a state othe* bar. ihe ^determinate state 
and the seci ity condition associated with [[the]] an electronic n i te 3 ge with the same 
oh; icte st sw d have been > ed as reflecting the indet ninat st - r to the 
update. 

M. (Currently Amended) The method of claim 1 v. be- e i scat, .a; , s " 
se ntvecumo ^ jarsrt^u.j i to , „ «' ^,',al m one othe 

e a inspected subs : t t-e > eesamg 

man \nes- l ul\es a e'aana mrume that mei eases the number of electronic mail menage* 
inspected with that characteristic above a threshold level 

36-3 7. (Cancelled). 

^ fit, \ \t o id i 1 t " e o 1 - nbvK > kcu e 1 

sc. wits an . ! < _ r T <-mkr 

updates die stored data to indicate that at least one characteristic of I Taj] an elect ronic mall 
message is acceptable. 
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message is unacceptable. 

4(;. (Currently Amended) I he method of claim 1 wherein reprocessing the transmitted 
he i - i ! ^ c . PwUdcs ne\ rgtl tra smM^i dectmmc^j a i -^^ ,o e mo ,e 
ifthe&gcosn '-o k 

41. (Currently Amended) The method of e> r ! ^Ikk >i\ i » 

e,e,m -k noe^agem a, Cv m v <n g« ..'is t i second -ecu \ C o id. va rc'lecL, lic 
unacceptable state. 

42. (Currently Amended) The method of claim 1 wherein upn n^r.g. 4 r ^ >> u< 
eiecl^o me ru ' nvsaage o des contimnn \ ( s , 
maii message if the second security condition still reflects the Indeterminate state. 

43. ^ i s Amended } The i i n of claim 1 wherein t- i <- i the Jxsl 
■ ^ ' 'tmoldh J » ' _ „ )>ah e-^agc eludes 

accessing the location of 'the electroni c mail message; 
retries r.g o.c coc'* ra a ' ' ov^d^e thnn the 'ocation; 

inspecting the payload portion of the transmitted electronic man message and identifying 
characteristics of hie payload portion; 

ee^ i- ,i r" Ojs > ,) ^ , t i - L -j 

s\. v^age v; Ml > pd; 1 ! stored data; and 

nrespc etoeompai ^g est ing e secojy » ^ 5 tion froi among t east 
one of the acceptable, unacceptable, and indeterminate stares. 
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44. twi ^ met < 1 \ > ! i 

message, the method comprising: 

comparing least one characteristic ofihe Ins! ums-nge hemg t-ortmumicated with a set 
of rules used in detemunmg - ^ , v ^ vi oessag&s; 

K.^jo v. > i mr , a ton i \ _ o - \ ^ ^ < s s - 4 J w i > j 

d l assificath 

a f t ~ ^4 t * ^ , < e-.s ^ t ! v - - >s ^ v '■w luiftil 

a defimt , <n; and 

- > h L i\ di I U Jl t V u I v. i t s i v, vatlll^s 4 

J ti.L O' O H Jt r h. 1 vO 

15 |Vi thdnoaai The memo chor.i 44 fa er enmor 

continuing to track the first message as a tracked message ifdetennining whether the first 
nes ;e is associated with tb s \ 5 icked s lo indicate a 

do* moc-des-d ;a \m *o o, o d>ul ■■t^seee 

46. (Withdrawn) The method of claim 44 further comprising: 

* V.SS _ i - !.S ^> > d^ , S > ^ 1 s ' - c j -, 

) ,v, o - i N ^ \ sou ^ 1 i \ i \ - si 

4 T i \\ mduA a . The i\ ^o <.o J 1 % octo^ the -V,; t -> <. h ,Ummed U 
be associ \ d ve das t ecurity cc sociated he first 

i n s k ated with ta 

48 ^ l k T <i\M) ^ - ^ -<- e ^ ledto 

bCdsSWvNM! , t'K J, s i "v I" \ vOfOlt'OO «s=<'!v'atOu V i 1 >C >0 

message is associated with an unacceptable state. 
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(Withdrawn) S k me od of da m 4^ where n the first message is dc aiiuned to 
eiated w i.th iefm ve das c th i iseci tyeond or s iaied a he first 
^ ge s 5 i'i.-; with a net 

50. (Withdrawn) The method of claim 44 wherein the first message is determined to 
be associated vith the defmi ve< assifkauon t tsecu ty condition tssociated vith the message 
is associated with a hostile state, 

51. < n The method of clain ere he firs message is not 

< temiined to be ssocialed with the defm das c o ect tycondit m ssoc tied 
with the first mes a ;e is assoc a ed th ai nddenni iate state 

52. (New) A method of processing messages, the method comprising: 
receiving a first electronic mail message sent, to an intended recipient: 
accessing, from electronic storage, data used to identify unacceptable electronic mail 

messages; 

analyzing the f st electronic mad message % irespe to t ccessec iat; ised o 
identify anacccp ahk n essages; 

nning tin a trst e eetrona ai ssage is present i epta ised orj the 
inaiysts o ell electros us „ 

1 uolM Ol.r^ s ttO! tL< l i i 

the first electronic mail message by the intended recipient; 

tracking the location of the transmitted first electronic mail message; 

receiving multiple electronic mail messages subsequent to receipt of the first electronic 
mail message; 

nspeel g le received m 1 - eka mic .mail messages 

d«. i. , tetensmtted Tst e .ceo-}. -a<cd neso,.g . < m ^ t i ^ , 

on the inspection of the received i«ulti|jte.etei6tH<;-.iS£lJ messages; 
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accessi i l st electronic mail i essage and 

US Ch WikJ si .1 -S v v - O O! ! C 1 I 

location of the transmitted first electronic mail message. 

53. (Now) A computer readable medium storing a computer program, the computer 

pragram c ons V? 

n - eh > fg a irs? e ee rots c mail message sent o a; ? to idea re c pie t 

accessing, from electronic storage, data used to identify unacceptable electronic mail 

messages; 

analyzing he irsteka o < a mes igc a espect to ttu ccessc data use o 
demif] ceepta u aes 

^ i \ ll t 1 S > v. 1 > L iNUtv 

analysis of the first electronic marl message; 

transmitting the first electronic mad message to die intended recipient to enable access of 
the first electronic mail message by the intended recipient; 

i acl dig e location of the trans* a i s >. v t x e 

receiving multiple electronic mail messages subsequent to receipt of die firs: electronic- 
mail message; 

inspecting the received multiple electronic mail messages; 

ht ; i li e v m , ed ! , c v. in 5 c sg % - v. - <. 

on the inspection of die received multiple electronic mail messages; 

access, \ t s , e j 1 

gdd ? ! u ^ l u s L'jou u . i essage <as< c> t'icirketl 
_c< ion of ' m ^ s essage 



54. (Mew) A system comprising; 

means fm tv-ct a^ifg a I r?t hecjen m re-sege -m > 'e L<a>ee em 
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tsttms for accessing, from electronic storage, data used to identify unacceptable 
electronic mail messages; 

means for analyzing die first electronic mad message with respect m the accessed data 
i sed to ide e| able i essage 

m ^ i n i j the first electron* i ics jeisprese acceptable based 
on the ! ys s - e first e tro c i n ess ige 

mcajiv inwi w i tr \ ! 

c aide dcccss , me 1 0 * c-fut n ' message b\ the m t erfo$ it^ > e i, 

means for tracking the location of the transmitted first electronic mail message; 

rm.ixlo «u i i i v ^ i ti « j ! i «. i v. v « ^ d !s< 

electronic mail message; 

n i. t s ' m s- the meen, cd multiple electronic m e^agc 

means tor del 5 ? 1 ■ tte* e r - [ 3 is nov 

mio-m ^, ^> v < v j , 1 1 >i . . 1 ud »eswib 

Weans for accessing the tracked location of the transmit tee 1 5 eler tronk n ril message; 

g dcieaen o f I < 

tracked location ' me < a> m m d first electronic mail message. 



